This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft File: hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json) Hash identifier: JASd7KoDuDWy1wbvmpARODXKkkwnQQo+A+0xZoD+r00= Subject key identifier: F1:75:C5:70:88:36:04:A8:43:15:43:93:AD:BE:C2:BF:5C:64:E5:83 Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f Certificate serial: 019B33B2336A2DE7DEFBA869921973C32794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 23:01:15 +0000 Manifest this update: Thu 18 Dec 2025 23:01:15 +0000 Manifest next update: Fri 19 Dec 2025 23:01:15 +0000 Files and hashes: 1: 1-DR1I-0Q86yRegJRW48TcU9jkak.roa (hash: BbaoF4QpKICKvF2DFJvuoi1HekvHPPg57x8hdzzKsN8=) 2: QRsEK7Mm82AysiVwrsI0fcQwGZk.roa (hash: +14a6gbAtC3j39lO1seQMdbzRZUzjrGGX9KqhXCRQaA=) 3: bMolsew2aNfnwVEKpwDy2jyM58c.roa (hash: 6E9s83W/T6d5cC26/y3n1N8eAzWZSpgeiiEyiR8AjmM=) 4: exOJgZWKhs3CfxljzDJO3y7m_kg.roa (hash: sLEFa7RsALBhT6NfAUon7unSxy37m3yVXscXWcoyxvY=) 5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: ik/EFBecYKL8fo6x8sKToeGMy0vBN/wtrceCwh4vcGY=) 6: nfEFUPm3YqGp7FQGkGbFir0VX4k.roa (hash: wcnZ1tdaEqbHq23LSrQJa3uBDPQRdB3Kf9OV1V7J1L8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:33:6a:2d:e7:de:fb:a8:69:92:19:73:c3:27:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f Validity Not Before: Dec 18 23:01:15 2025 GMT Not After : Dec 19 23:01:15 2025 GMT Subject: CN=f175c570883604a843154393adbec2bf5c64e583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:e0:7e:4f:8b:1b:10:fc:55:53:ff:19:63: c0:f2:6a:29:dd:04:dd:c5:74:81:fa:4d:45:30:9f: 63:f9:1e:27:3c:c7:af:05:93:7b:6d:83:43:0b:3d: 98:56:69:05:de:af:3a:51:96:54:15:26:1b:c6:33: 59:db:e2:ae:7b:db:9a:61:1e:da:b0:5a:48:b2:99: 13:ec:c6:47:37:9c:81:b9:14:a9:15:c3:e3:4a:65: 08:c6:a4:57:60:cb:b2:ee:e1:6e:ae:f5:bd:3d:b1: eb:04:c0:12:0b:9f:46:04:a4:96:b7:2b:62:c7:74: 4b:db:9a:66:fa:25:1c:ba:ab:4b:d2:44:64:0d:cc: 77:82:31:99:eb:14:52:54:27:62:af:b6:ec:b0:b8: bb:07:80:e3:c3:76:48:1e:dd:29:7c:f2:02:9c:15: b4:b9:49:60:8f:3a:9d:c5:4b:ba:06:d5:76:38:02: e1:55:03:2e:45:fa:bd:97:a7:28:46:2b:24:5e:e8: e2:45:64:6b:71:52:12:ba:ed:f6:80:89:56:0e:9c: 76:0f:8e:fa:60:72:84:ba:fa:98:07:71:ab:22:73: 6f:c6:24:cf:c2:44:cd:31:77:f1:33:8b:a6:0c:d1: 31:b9:26:09:36:81:39:36:01:65:b8:67:3a:34:5f: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:75:C5:70:88:36:04:A8:43:15:43:93:AD:BE:C2:BF:5C:64:E5:83 X509v3 Authority Key Identifier: keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:d0:14:4c:aa:c5:09:ba:0d:01:e8:fd:3e:1b:36:e4:89:f9: 7b:11:e8:e6:d8:ff:d5:28:ad:59:0b:ac:fd:eb:be:26:5e:9e: fa:ee:54:4f:e9:04:7b:3c:ad:c8:46:74:ea:7e:05:8e:e2:b9: 98:00:f1:27:a2:b1:2b:c0:b2:3a:81:4e:c8:5d:44:03:a9:68: 01:84:89:c1:53:62:3e:98:a4:a6:23:8e:ba:7a:10:a5:0d:ff: 49:27:c8:a1:77:c8:d9:ea:4c:46:ff:bb:fa:4b:4b:57:1e:35: 53:df:a1:6a:6f:88:85:71:31:9a:0b:26:a1:11:02:08:59:1a: 17:b2:ac:53:b6:0b:db:15:86:d8:fb:7b:e4:ba:29:fe:72:42: d8:89:ad:3c:80:35:c5:29:8e:08:2a:82:26:90:0a:72:19:67: b3:4c:3f:96:d8:dc:0e:c5:b2:01:01:e4:ef:ff:92:ef:75:77: a6:4b:f7:5c:7c:9e:d2:16:c9:a0:b1:6b:b2:cd:96:31:90:59: 16:0e:eb:7c:22:27:02:34:67:85:2d:de:f2:7c:9d:41:36:da: 8b:c8:7e:2e:21:0b:cc:f2:6f:3c:d9:4b:01:fe:5f:10:58:7a: 3e:94:f6:f6:19:00:ee:86:db:20:72:5a:d4:ef:5e:7d:76:99: 99:7f:75:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsjNqLefe+6hpkhlzwyeUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWM1ODc1MmYzMzM2NDIyZmYwZWUxNzI2NDc0NTkxZTdh NDFlNWYwHhcNMjUxMjE4MjMwMTE1WhcNMjUxMjE5MjMwMTE1WjAzMTEwLwYDVQQD EyhmMTc1YzU3MDg4MzYwNGE4NDMxNTQzOTNhZGJlYzJiZjVjNjRlNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Hgfk+LGxD8VVP/GWPA8mop3QTd xXSB+k1FMJ9j+R4nPMevBZN7bYNDCz2YVmkF3q86UZZUFSYbxjNZ2+Kue9uaYR7a sFpIspkT7MZHN5yBuRSpFcPjSmUIxqRXYMuy7uFurvW9PbHrBMASC59GBKSWtyti x3RL25pm+iUcuqtL0kRkDcx3gjGZ6xRSVCdir7bssLi7B4Djw3ZIHt0pfPICnBW0 uUlgjzqdxUu6BtV2OALhVQMuRfq9l6coRiskXujiRWRrcVISuu32gIlWDpx2D476 YHKEuvqYB3GrInNvxiTPwkTNMXfxM4umDNExuSYJNoE5NgFluGc6NF/PnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPF1xXCINgSoQxVDk62+wr9cZOWDMB8GA1UdIwQY MBaAFIRcWHUvMzZCL/DuFyZHRZHnpB5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYt ZjEzNGU1MWNjMDViLzEvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYtZjEzNGU1MWNjMDVi LzEvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9AUTKrF CboNAej9Phs25In5exHo5tj/1SitWQus/eu+Jl6e+u5UT+kEezytyEZ06n4FjuK5 mADxJ6KxK8CyOoFOyF1EA6loAYSJwVNiPpikpiOOunoQpQ3/SSfIoXfI2epMRv+7 +ktLVx41U9+ham+IhXExmgsmoRECCFkaF7KsU7YL2xWG2Pt75Lop/nJC2ImtPIA1 xSmOCCqCJpAKchlns0w/ltjcDsWyAQHk7/+S73V3pkv3XHye0hbJoLFrss2WMZBZ Fg7rfCInAjRnhS3e8nydQTbai8h+LiELzPJvPNlLAf5fEFh6PpT29hkA7obbIHJa 1O9efXaZmX91UQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:47:07 2025 by rpki-client